this, i'm not sure why it is hard to see that this is easy to implement without storing passwords in plaintext.